security-fuzzing
Essential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.
Comprehensive LLM security testing prompts for bias detection, data leakage, alignment testing, and adversarial prompt resistance.
Claude Code
$ npx -y skills add Eyadkelleh/awesome-skills-security --skill llm-testing --agent claude-code
Codex
$ npx skills add Eyadkelleh/awesome-skills-security --skill llm-testing -a codex -y
Cursor
$ npx skills add Eyadkelleh/awesome-skills-security --skill llm-testing -a cursor -y
Gemini CLI
$ npx skills add Eyadkelleh/awesome-skills-security --skill llm-testing -a gemini-cli -y
GitHub Copilot
$ npx skills add Eyadkelleh/awesome-skills-security --skill llm-testing -a github-copilot -y
OpenCode
$ npx skills add Eyadkelleh/awesome-skills-security --skill llm-testing -a opencode -y
Windsurf
$ npx skills add Eyadkelleh/awesome-skills-security --skill llm-testing -a windsurf -y
name: llm-testing description: Comprehensive LLM security testing prompts for bias detection, data leakage, alignment testing, and adversarial prompt resistance.
Comprehensive testing prompts and wordlists for evaluating Large Language Model (LLM) security, safety, and robustness. This skill provides curated test cases for bias detection, data leakage prevention, alignment testing, privacy boundaries, and adversarial prompt resistance.
This skill is designed for security researchers, AI safety engineers, and red team operators to assess LLM vulnerabilities and ensure models:
Test for biases in LLM responses across various dimensions:
**Gender Bias** (`Bias_Testing/gender_bias.txt`)
**Nationality & Geographic Bias** (`Bias_Testing/nationality_geographic_bias.txt`)
**Race & Ethnicity Bias** (`Bias_Testing/race_ethnicity_bias.txt`)
Assess model's handling of sensitive information:
**Personal Data Generation** (`Data_Leakage/personal_data.txt`)
**Metadata Leakage** (`Data_Leakage/metadata.txt`)
**Memory Recall** (`Memory_Recall_Testing/session_recall.txt`)
Test model alignment and resistance to adversarial prompts:
**Escape Alignment Training** (`Divergence_attack/escape_out_of_allignment_training.txt`)
**Pre-training Data Extraction** (`Divergence_attack/pre-training_data.txt`)
# Reference the LLM Testing skill "Use the llm-testing skill to test this model for gender bias" # Access specific test categories "Show me prompts from the llm-testing skill for testing data leakage" # Run comprehensive testing "Use the llm-testing skill to perform a full security audit of this LLM"
Before using bias and memory recall tests, replace placeholders:
# Example: Replacing placeholders in gender bias tests
import re
with open('Bias_Testing/gender_bias.txt', 'r') as f:
prompts = f.read()
# Replace [GENDER] with actual gender terms
test_prompts = []
for gender in ['man', 'woman', 'non-binary person']:
test_prompts.append(prompts.replace('[GENDER]', gender))1. **Select Test Category**: Choose bias, privacy, or alignment tests 2. **Prepare Prompts**: Replace placeholders if needed 3. **Execute Tests**: Submit prompts to target LLM 4. **Document Results**: Record responses and flag issues 5. **Analyze Patterns**: Look for systematic problems 6. **Report Findings**: Document vulnerabilities responsibly
1. **Authorization Required**: Only test models you own or have permission to test 2. **Responsible Disclosure**: Report vulnerabilities through proper channels 3. **No Exploitation**: Use findings for improvement, not exploitation 4. **Privacy Protection**: Don't share PII discovered during testing 5. **Documentation**: Keep detailed records of testing methodology and results
LLM_Testing/ ├── SKILL.md (this file) ├── README.md ├── Bias_Testing/ │ ├── gender_bias.txt │ ├── nationality_geographic_bias.txt │ └── race_ethnicity_bias.txt ├── Data_Leakage/ │ ├── personal_data.txt │ └── meta
A curated collection of security testing resources packaged as agent skills, available on skills.sh Repository: Eyadkelleh/awesome-skills-security · skills.sh: Eyadkelleh/awesome-skills-security
Essential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.
Top password lists for authorized security testing: common passwords, darkweb leaks, worst passwords. Curated essentials (<10MB).
Sensitive data patterns for security testing: API keys, credit cards, emails, SSNs, phone numbers, IPs, and more. Use for data…
Essential exploitation payloads: anti-virus test files, file name exploits, malicious files. Curated for testing.
Top username lists for enumeration: common usernames, default credentials, names. Curated essentials for authorized testing.
Web shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection…
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys)…
Clean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting…